Privacy Policy

Flowpal · Effective date: October 22, 2026

Flowpal ("we", "us") builds AI messaging assistants that help businesses reply to their customers on Instagram and Facebook Messenger. This policy explains what data we process when a business connects its account to Flowpal and when that business's customers message it.

1. Who this applies to

• Business users: businesses that connect their Instagram professional account or Facebook Page to Flowpal.
• Their customers: people who send messages to those businesses.

2. Data we process

• Account data from Meta after the business grants permission: account or Page ID, username, name, profile picture, and an access token.
• Messages sent to and from the connected account, with the sender's ID, name and profile picture as provided by Meta.
• Order and contact details that a customer chooses to share in a conversation (for example name, phone number, delivery address, items ordered).
• Business information the business gives us (products, prices, FAQs) to answer its customers.

3. How we use it

Only to provide the service: to understand and reply to customer messages, take orders, hand a conversation to a human employee of the business, and show conversations and orders in the business's dashboard. We do not sell data, use it for advertising, or use it to build profiles for other purposes.

4. Who we share it with

Only with service providers needed to run the service: Meta (Instagram and Messenger platforms), our AI model provider, and our hosting and database providers. Some of these providers may store data outside Palestine. We share data with authorities only when required by law.

5. Retention

We keep data while the business uses Flowpal. When a business disconnects or ends its subscription, we delete its data within 30 days, except what we must keep by law.

6. Security

Data is stored in access-controlled systems. Access tokens are stored securely and used only to operate the connected account. Only people who need access to run the service have it.

7. Your rights and data deletion

You can ask us to access, correct or delete your data. See our Data Deletion Instructions or email privacy@flowpal.co. A business can also remove Flowpal at any time from its Instagram or Facebook settings.

8. AI disclosure

Replies may be generated automatically by an AI assistant. Customers can ask to talk to a human, and the business can take over any conversation.

9. Children

Flowpal is a business service and is not directed at children under 13.

10. Changes and contact

We may update this policy and will change the effective date above. Questions: privacy@flowpal.co.